CVE-2016-10502 While generating trusted application id, An integer overflow can occur giving the trusted application an invalid identity in Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650...
CriticalCVSS 9.8
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
While generating trusted application id, An integer overflow can occur giving the trusted application an invalid identity in Snapdragon Mobile and Snapdragon Wear in versions MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835 and SDA660.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qualcomm mdm9206 firmware | All versions | No fix listed |
| qualcomm mdm9607 firmware | All versions | No fix listed |
| qualcomm mdm9650 firmware | All versions | No fix listed |
| qualcomm sd 210 firmware | All versions | No fix listed |
| qualcomm sd 212 firmware | All versions | No fix listed |
| qualcomm sd 205 firmware | All versions | No fix listed |
| qualcomm sd 835 firmware | All versions | No fix listed |
| qualcomm sda660 firmware | All versions | No fix listed |
| qualcomm Snapdragon Mobile, Snapdragon Wear | = MDM9206, MDM9607, MDM9650, SD 210/SD 212/SD 205, SD 835, SDA660 | No fix listed |
References
- 105838 third-party-advisory vdb-entry
- source.android.com third-party-advisory